On Tue, 13 Jan 2004, Paul wrote:
> I'd like to limit the total number of connections from anywhere,
> and would like some clarification. For example, with the following:
>
> acl connlimit maxconn 2
> http_access deny all connlimit
> http_access allow !connlimit
maxconn is appplied per source IP address so this is not what you are
looking for.
> I can establish at most 2 connections from one IP number.
> So far so good. But if I come in from another IP number, I can
> establish additional connections, leading me to believe that the
> *total* number of connections allowed is essentially unlimited.
The total number of connections is limited by the maximum number of
filedescriptors your OS allows Squid to use. Each concurrent requests uses
up to 3 filedescriptor (client connection, server connection, cache).
If Squid runs short of filedescriptors (less than 100 free filedescriptors
IIRC) it will automatically stop accepting new client connections.
The number of available filedescriptors can be set by ulimit when starting
Squid. You should not set this limit lower than ca 128, and you should
almost certainly disable persistent connections if considering running
Squid with a low amount of filedescriptors or otherwise limited amount of
connections.
Regards
Henrik
Received on Wed Jan 14 2004 - 01:52:56 MST
This archive was generated by hypermail pre-2.1.9 : Sun Feb 01 2004 - 12:00:06 MST